In IRM architecture, how does a risk statement relate to a risk on a wastewater plant entity—parallel to control objective versus control?
Select an answer to reveal the explanation.
Short Explanation
Same idea as a recipe versus tonight’s dinner. The risk statement is the reusable definition; the risk is that definition living on a real entity like the wastewater plant. Mixing those up is like confusing the cookbook with the plated meal.
Full Explanation
IRM separates reusable definitions from scoped instances. A risk statement defines the exposure in general; a risk instantiates that statement against an entity (and often inherits assessment and response context). This parallels control objective versus control. Treating them as synonyms or reversing definition versus instance breaks architectural consistency.